CVE-2025-64324

< 1.6.1

KubeVirt is a virtual machine management add-on for Kubernetes. The hostDisk feature in KubeVirt allows mounting a host file or

7.7HIGH

CVE-2025-64437

< 1.5.3

KubeVirt is a virtual machine management add-on for Kubernetes. In versions before 1.5.3 and 1.6.1, the virt-handler does not veri

5.0MEDIUM

CVE-2025-64436

<= 1.5.3

KubeVirt is a virtual machine management add-on for Kubernetes. In 1.5.0 and earlier, the permissions granted to the virt-handler

5.3MEDIUM

CVE-2025-64435

<= 1.6.3

KubeVirt is a virtual machine management add-on for Kubernetes. Prior to 1.7.0-beta.0, a logic flaw in the virt-controller allows

5.3MEDIUM

CVE-2025-64434

< 1.5.3

KubeVirt is a virtual machine management add-on for Kubernetes. Prior to 1.5.3 and 1.6.1, due to the peer verification logic in vi

4.7MEDIUM

CVE-2025-64433

< 1.5.3

KubeVirt is a virtual machine management add-on for Kubernetes. Prior to 1.5.3 and 1.6.1, a vulnerability was discovered that allo

6.5MEDIUM

CVE-2025-64432

< 1.5.3

KubeVirt is a virtual machine management add-on for Kubernetes. Versions 1.5.3 and below, and 1.6.0 contained a flawed implementat

4.7MEDIUM

CVE-2024-33394

<= 1.2.0

An issue in kubevirt v1.2.0 and before allows a local attacker to execute arbitrary code via a crafted command to get the

5.9MEDIUM

CVE-2023-26484

<= 0.59.0

KubeVirt is a virtual machine management add-on for Kubernetes. In versions 0.59.0 and prior, if a malicious user has taken over a

8.2HIGH

CVE-2022-1798

>= 0.20.0 and < 0.55.1

A path traversal vulnerability in KubeVirt versions up to 0.56 (and 0.55.1) on all platforms allows a user able to configure the k

8.7HIGH

CVE-2020-1701

< 0.26.0

A flaw was found in the KubeVirt main virt-handler versions before 0.26.0 regarding the access permissions of virt-handler. An att

6.5MEDIUM

CVE-2020-14316

<= 0.29

A flaw was found in kubevirt 0.29 and earlier. Virtual Machine Instances (VMIs) can be used to gain access to the host's filesyste

9.9CRITICAL

CVE-2019-10175

all versions

A flaw was found in the containerized-data-importer in virt-cdi-cloner, version 1.4, where the host-assisted cloning feature does

6.5MEDIUM

CVE-2019-3841

>= 1.4.0 and <= 1.5.3

Kubevirt/virt-cdi-importer, versions 1.4.0 to 1.5.3 inclusive, were reported to disable TLS certificate validation when importing

7.4HIGH